Because the server only returns the HTML, CSS, and JavaScript that is executed in the browser. You are missing a big piece of the puzzle here. The server code - which handles all of the API invocations and database transactions amongst a multitude of other things.